Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/_RnNK1CWDoB78GNeZotGsCFo7ok.asa
File:                     _RnNK1CWDoB78GNeZotGsCFo7ok.asa (raw, json)
Hash identifier:          pOBlcHniej/BHuoOsHj01R7kFzHaQhLCtJ0YZekM18Q=
Subject key identifier:   FD:19:CD:2B:50:96:0E:80:7B:F0:63:5E:66:8B:46:B0:21:68:EE:89
Certificate issuer:       /CN=5a98e3805b949b8a56cb12a242cad8020d9156d4
Certificate serial:       019F486A249A927E0EE5A7330369EFA6E545
Authority key identifier: 5A:98:E3:80:5B:94:9B:8A:56:CB:12:A2:42:CA:D8:02:0D:91:56:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/_RnNK1CWDoB78GNeZotGsCFo7ok.asa
Signing time:             Thu 09 Jul 2026 19:45:43 +0000
ASPA not before:          Thu 09 Jul 2026 19:45:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205774
Providers:                AS: 34594
                          AS: 44306
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:48:6a:24:9a:92:7e:0e:e5:a7:33:03:69:ef:a6:e5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a98e3805b949b8a56cb12a242cad8020d9156d4
        Validity
            Not Before: Jul  9 19:45:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd19cd2b50960e807bf0635e668b46b02168ee89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:69:1f:2d:aa:5a:2f:bd:2d:87:4e:fb:9e:53:
                    1b:ca:46:91:ed:20:78:80:ae:18:42:ef:ca:df:69:
                    5b:1e:3d:bd:4d:d3:42:d1:af:72:f7:90:ad:08:ab:
                    2d:3c:74:40:21:63:97:07:ef:e9:7e:9d:a6:fe:5d:
                    22:69:75:fc:85:06:35:24:f2:7e:9c:52:79:58:bf:
                    a4:a4:b7:2f:a6:fa:a9:72:1a:6c:57:2f:69:63:66:
                    e8:1f:b0:f3:ce:56:0b:e8:05:66:a3:26:e1:94:e3:
                    31:7d:2c:36:96:20:82:4b:81:57:eb:80:b5:53:84:
                    5f:6c:4e:5a:59:86:66:b1:56:ac:dd:18:0c:b3:35:
                    c9:d6:2f:16:c9:00:f6:93:6e:9f:b3:1f:c3:ff:40:
                    80:63:24:30:be:0b:03:6c:9e:66:d3:b1:ce:77:2f:
                    b1:cc:02:4d:e0:5d:c4:18:e3:c1:19:6b:c2:55:0b:
                    ac:c8:71:a1:2a:5c:2a:4b:e1:f8:8f:2f:0b:ce:6e:
                    01:7a:f2:4a:48:89:dd:4f:e6:b6:86:bc:13:ac:79:
                    60:a5:d9:fa:42:7f:dd:54:3b:34:ff:e0:af:8a:00:
                    8b:fb:bd:b3:53:97:17:14:31:23:cf:16:d2:9e:29:
                    71:f0:54:73:6a:09:28:62:94:e1:74:5d:56:ed:43:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:19:CD:2B:50:96:0E:80:7B:F0:63:5E:66:8B:46:B0:21:68:EE:89
            X509v3 Authority Key Identifier:
                keyid:5A:98:E3:80:5B:94:9B:8A:56:CB:12:A2:42:CA:D8:02:0D:91:56:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/_RnNK1CWDoB78GNeZotGsCFo7ok.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205774

    Signature Algorithm: sha256WithRSAEncryption
         99:c0:01:1b:90:21:4d:3d:be:91:db:9d:51:be:e8:f0:52:7c:
         86:32:73:ac:36:61:f7:3e:60:b4:77:be:0a:ab:b9:4d:a1:2f:
         35:8d:e9:a6:f7:c0:5f:ba:35:10:4f:67:5d:ef:fc:d9:9f:07:
         6f:7a:58:bf:18:26:02:f1:75:70:3e:aa:04:81:d2:79:96:9c:
         6c:db:02:04:e5:dd:29:47:6c:be:d1:28:b5:e0:b4:8e:87:2e:
         57:d2:02:97:19:d6:e2:6d:4f:e5:79:72:9f:cc:91:23:1f:2d:
         49:d4:7a:85:a8:48:35:c1:03:0b:4f:50:21:3f:25:6a:ce:80:
         a5:b3:7d:69:2a:8a:97:49:84:40:23:01:06:9b:79:1b:20:a2:
         e0:a1:34:f8:e7:a2:ab:59:d0:6d:43:01:ae:1f:97:06:44:82:
         22:db:c1:9d:a7:83:47:7b:3c:93:60:f6:11:9d:bf:ea:89:36:
         2a:31:1c:dd:56:eb:e1:ec:23:68:aa:f1:fe:5a:e7:b8:41:e2:
         70:22:70:65:b2:8c:aa:7e:ce:d5:3c:ff:51:05:83:5b:37:87:
         eb:ed:79:03:93:99:2b:b6:d9:6e:0d:92:ec:32:f6:6f:6d:a0:
         ae:27:7f:3d:a7:4f:cc:19:7b:f2:74:f3:ae:77:c6:e1:7e:78:
         40:ef:a5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:57:13 2026 by rpki-client